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Abstract 

Optical networks are vulnerable to physical layer attacks; wiretappers can improperly receive 
messages intended for legitimate recipients. Our work considers an aspect of this security problem 
within the domain of multimode fiber (MMF) transmission. MMF transmission can be modeled via 
a broadcast channel in which both the legitimate receiver's and wiretapper's channels are multiple- 
input-multiple-output complex Gaussian channels. Source-channel coding analyses based on the use 
,—4- ' of distortion as the metric for secrecy are developed. Alice has a source sequence to be encoded and 

o' 

transmitted over this broadcast channel so that the legitimate user Bob can reliably decode while forcing 
the distortion of wiretapper, or eavesdropper, Eve's estimate as high as possible. Tradeoffs between 

•f-H 

K^ ' transmission rate and distortion under two extreme scenarios are examined: the best case where Eve has 

only her channel output and the worst case where she also knows the past realization of the source. It 
is shown that under the best case, an operationally separate source-channel coding scheme guarantees 
maximum distortion at the same rate as needed for reliable transmission. Theoretical bounds are given, 
and particularized for MME Numerical results showing the rate distortion tradeoff are presented and 
compared with corresponding results for the perfect secrecy case. 
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Index Terms 
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I. Introduction 

Single mode fiber systems are believed to have reached their capacity limits. In particular, 
techniques such as wavelength-division multiplexing (WDM) and polarization-division multi- 
plexing (PDM) have been heavily studied in the past few years, leaving little room for further 
improvement in capacity [HJ. Space-division multiplexing (SDM) is a promising solution for 
meeting the growing capacity demands of optical communication networks. One way of realizing 
SDM is via the use of multimode fiber (MMF). While multimode transmission provide greater 
capacity, the security of such systems can be an issue because an wiretapper can eavesdrop 
upon MMF communication by simply bending [2] the fiber. MMF is a multiple-input-multiple- 
output (MIMO) system [1J that captures the charateristics of crosstalk among different modes. 
The secrecy capacity of a Gaussian MIMO broadcast channel was studied by J3), but the result 
cannot be applied directly to MMF because the channel is not the same. The secrecy capacity 
of this channel was studied in [2] where it is shown that the channel conditions required for 
perfect secrecy are quite demanding. 

Equivocation is commonly used to quantify secrecy in the study of physical layer security of 
communication systems. However, while equivocation is a reasonable metric for perfect secrecy, 
its interpretation for partial secrecy is less clear. Distortion is an alternative measure of secrecy 
that provides an intuitive measure of partial secrecy by comparing the difference between the 
information intended for the legitimate receiver and eavesdropper's estimate of it. Distortion was 
used in [4] and [5] as a metric for secrecy in the context of a noiseless network with secret 
key sharing. In this work, we are concerned with physical layer secrecy in MMF systems. In 
order to examine trade-offs associated with such secrecy, we will consider partial secrecy and 
thus will use a distortion-based formulation. This prompts us to formulate this problem as a 
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source-channel coding problem. Along the lines studied in a general setting in [6|, some results 
of which can be directly applied to MMF systems. 

The rest of the paper is structured as follows. In Section HD we introduce the system model 
and define the source-channel coding problem under two scenarios. In Section [Till we provide 
theoretical bounds with source-channel coding for general broadcast channel when the channels 
are fixed. In Section [TV] we apply the general results to the MMF model under the two 
scenarios. In Section |Vj we provide numerical evaluation to the MMF source-channel model 
under Hamming distortion. In Section |VTJ we discuss the generalization of this model to the 
case of random channels in which the channel state information (CSI) is not available to the 
transmitter. Finally, in Section IVII1 we conclude the paper and discuss open problems from this 
work. 

II. System Model 

A source node (Alice) has an independent and identically distributed (i.i.d.) sequence S k that 
she intends to transmit over an MMF such that a legitimate user (Bob) can reliably decode 
the source sequence, while keeping the distortion between an eavesdropper (Eve) and Alice as 
high as possible. An M-mode MMF is modeled as a memoryless MIMO channel with input X, 
which is an M-dimensional complex vector. Unlike wireless MIMO which has a total power 
constraint, MMF channels have the following per mode power constraint averaged over n uses 

of the channel: 

1 " 

- Y^ \ x i m) \ 2 < 1 for all modes m 6 [1 : M]. (1) 

More generally (as in [|3)), we will consider a power constraint of the form 

1 - 

-Vx,x/ ± Q, (2) 

n *-^ 

i=\ 

where Q e {A e H MxM : A y 0, A u = 1} and % denotes the set of Hermitian matrices. One 
element in this set is the identity matrix / (constraint (Q])). We will focus on Q = I, and later in 
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Section [VI] we will explain why this is the case of our particular interest. A detailed discussion 
of the MMF channel model can be found in [1J. This is a joint source-channel coding problem. 
The source sequence S k is mapped to the channel input sequence X n through a source-channel 
encoder. 

A. The Legitimate User Communications Model 

The channel between Alice and Bob is complex, Gaussian, MIMO, with input X G C M as 
described above, and output Y G C M given by 

Y = HX + N, (3) 

where N ~ CJ\f(0, &%I, 0) is M-dimensional, uncorrected, zero-mean, complex, Gaussian noise 
and H is an M x M complex matrix. Bob's channel matrix H is of the form 

H = ^/E^LV, (4) 

where \I> G C MxM is unitary and E L is a constant scalar that measures the average power of 
the channel. We refer to E§Ljo 2 N as the SNR of the channel. 

Matrix \P, the unitary factor of the channel H, describes the modal crosstalk [|T] . \I> is uniformly 
distributed among all unitary matrices in C MxM , but ^ stays constant during n channel uses. The 
CSI (the actual realization of ^J) is known only to the receiver but is unknown to the transmitter 
due to the long round-trip delay over large distances common in optical transmission. 

Upon receiving Y n , Bob makes an estimate S k of the original source sequence S k . For 
almost lossless reconstruction, we require the probability that Bob's reconstruction differs from 
the original goes to zero asymptoticly with the source blocklength. That is, 

F[S k ^ S k ] ^ k 0. 
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B. The Eavesdropper Communications Model 

The channel between Alice and Eve is also complex, Gaussian, MIMO, with input X E C M 
as described above, and output Z E C M given by 



H e X + N e 



(5) 



where N e ~ CJ\f(0, o 2 N eI, 0) is M-dimensional uncorrelated, zero-mean, complex, Gaussian 
noise, and H e is an M x M complex matrix. Eve's channel matrix H e is of the form 



H e = ^E L e V$y e , 



(6) 



where ty e E C MxM is unitary, $ is diagonal with positive entries, and E L e is the average power 
of Eve's channel. 

Note that Eve has a different signal to noise ratio SNR e = E L e /a 2 N e. The channel matrix 
has a unitary component \I/ e which is statistically the same as \l/. The diagonal component of $ 
corresponds to the mode-dependent loss (MDL) as introduced in 0]. The diagonal matrix $ is 
also random, and its distribution will be discussed later in Section |VjJ It is assumed that ^, \l/ e 
and $ are constant throughout the block and the eavesdropper has the CSI. We will examine 
two extreme cases based on the amount of side information Eve has. 
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Fig. 1: MMF source-channel coding model. The physical channel is a MIMO broadcast channel. 

1) No causal information available to Eve: The case in which Eve has only her own channel 
output but no side information about the source corresponds to the best scenario for the legitimate 
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users of the network, Alice and Bob. With the channel output alone, Eve has very limited 
resources in hand to make the estimate. This model is defined mathematically as follows. We 
use italic capital letter to denote the support of a random variable (e.g. X denotes the support of 
X) . Let f kn : S k I—)- X n be a source-channel encoder and g k ^ n : y n \-^- S k be the corresponding 
decoder. Let t k be Eve's estimation of original source sequence s k . For a distortion measure 
d : S x T i— > R + , the distortion between two sequences is defined to be the per-letter average 
distortion d k (s k ,t k ) = ^J2i=i^( s i^i)- Th e system model is shown in Fig. [Q however, the 
dashed line represents additional information that is not available to the eavesdropper in this 
first scenario. We use the lower case t k (z n ) to denote Eve's deterministic estimation functions 
of her observation z n and the capital letter T k = t k (Z n ) to denote the function of the random 
variable Z n . The following definitions in this section are for constant fixed channels. 

Definition 1. For a given distortion function d(s,t), a rate distortion pair (R,D) is achievable 
if there exists a sequence of encoder/decoder pairs f k ^ n and g k ^ n such that 

*- = *, 

n 



lim ¥[S k ^ S k ] = 0, 

n— >oo 

and 

liminf min E[d{S k , t k (Z n ))} > D. 

n^oo t k (z n ) 

Note that the rate-distortion pair (R,D) captures the tradeoff between Bob's rate for reliable 
transmission and Eve's distortion, which is different from rate-distortion theory in the traditional 
sense. 

2) With causal information available to Eve: On the other hand, we are also interested in 
the case in which, at each time instance j, Eve gets to see the past realization of the source 
sequence S^ -1 . This would be the worst scenario for the legitimate users. The definition for an 
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achievable rate distortion pairs (R, D) is similar to Definition 1 given in the previous subsection 

except the last condition is replaced by 

- k 



lim inf min E 

n^oo { 4j ( 2 «,^-l)}fe 1 



> D. 



The system model is shown in Fig. [T] with dashed line representing the availability of the causal 
information. The maximum distortion A is defined as 

A = mmE[(l(5,{)]. (7) 

In the next section we apply results from [|6) and to our source-channel setting for a 
general broadcast channel. However, the results in [|7] were not derived in the context of a 
noisy communication channel. Extending for the noisy channel case of interest in this work 
turns out to require a so-called "strong secrecy" channel coding proof. This is presented in 
Section |inj In the following sections, we apply the theoretical results to the MMF channels by 
choosing proper auxilliary random variables. Finally we will discuss how this can be generalized 
to random channels when no CSI is available at the transmitter. 

III. Theoretical Bounds 

In this section, instead of focusing on MMF, we consider a more general problem in which the 
channel is any noisy memoryless broadcast channel. Let Pyz\x denote the transition probability 
of the broadcast channel in each use. We first make some general observations on the communi- 
cation between Alice and Bob, as well as the communication between Alice and Eve. If Eve is 
not present, Alice and Bob can communicate losslessly at any rate lower than R = max ^-A ' - 
because separate source-channel coding is optimal for point-to-point communication. Ideally, we 
want to force maximum distortion A upon Eve (the average distortion achieved by guesses based 
only on the prior distribution of the source). But higher distortion to Eve may come at the price 
of a lower communication rate to Bob. The content of this section is organized as follows: the 
rate-distortion region for the "no causal information" case is first given in Theorem [Q to prepare 
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for the achievability proof of Theorem [IJ an operational separation scheme is discussed; finally, 
an achievable rate-distortion region is given in Theorem |5] for the causal case under Hamming 
distortion. 

We now state the rate-distortion result for general source- channel coding with an i.i.d. source 
sequence and a discrete memoryless broadcast channel Pyz\x when no causal information is 
available to Eve. In the following theorem, we will see that the source sequence can be delivered 
almost losslessly to Bob at a rate arbitarily close to Rq while the distortion to Eve is kept at 
A, as long as the secrecy capacity is positive. We use the symbol — D— to denote a Markov 
relation. 

Theorem 1. For an i.i.d. source sequence S k and memoryless broadcast channel Pyz\x, if there 
exists W -O-X -D-Y Z such that I(W; Y) - I(W; Z) > 0, then (R, D) is achievable if and 
only if 

max x I(X;F) 

R K — Wis) — ' ( } 

D < A (9) 

Remark: The requirement R s = I(W; Y) — I(W; Z) > implies the existence of a secure 
channel with a positive rate, i.e. the eavesdropper's channel is not less noisy than the intended 
receiver's channel. So instead of demanding a high secure transmission rate R s as in perfect 
secrecy defined under equivocation H(S k \Z n ) ss H(S k ), we only need to ensure the existence 
of a secure channel regardless of the actual rate R s as long as it is strictly positive. 

The converse is straightforward. Each of the inequalities (EJ) and ([9j) is true individually for any 
channel and source, flE]) by channel capacity coupled by optimality of source-channel separation, 
and (jUJ) by definition. 

This paper proposes a source-channel coding scheme that can achieve the rate and distortion 
in Theorem \T\ The scheme is based on recent work in []6). The idea for achievability is to 
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operationally separate the source and channel coding (see Fig. [2]). The source encoder compresses 
the source and splits the resulting message into a private message and a non-private message. A 
channel encoder is cancatenated digitally with the source encoder so that the channel delivers 
both the private and non-private messages reliably to Bob and keeps the private message secret 
from Eve, as in [8J. The overall source-channel coding rate will have the following form: R = 
n = lo k \M\ ' "n — = it**"' wnere l«M I is the total cardinality of the private and the non-private 
messages; R ch and R src are the channel coding and source coding rates, respectively. 

Let us look at two models in the following subsections that will help us establish the platform 
for showing the achievability of Theorem [TJ 
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Fig. 2: Operational Separate Source-Channel Coding 



A. Channel Coding and Strong Secrecy 

Consider a memoryless broadcast channel Pyz\x and a communication system with a private 
message M s and a non-private message M p that must allow the intended receiver to decode both 
M s and M p while keeping the eavesdropper from learning anything about M s . Problems like 
this were first studied by Csiszar and Korner [|8] in 1978, as an extension of Wyner's work in 
[|9l. Their model differs from ours in that, the second receiver (the eavesdropper in our case) 
is required to decode the public message M p . The mathematical formulation and result of our 
channel model is stated below. We focus on the message pairs (M s , M p ) whose distribution 
satisfies the following 



M s \M p =m p { m s 



2"' 



nR s 



(10) 
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for all {m si m p ). Later we will show a source encoder can always prepare the input messages 
to the channel of this form. 

Definition 2. A (R s ,R p ,n) channel code consists of a channel encoder F c (possibly stochastic) 
and a channel decoder g c such that 

F c :M s xM p ^ X n 

and 

g c -y n >->• M s x M p 
where \M S \ = 2 nRs and \M P \ = 2 nR ". 

Definition 3. The rate pair (R s ,R p ) is achievable under weak secrecy if for all (M s ,M p ) 
satisfying (TTUI) . there exists a sequence of (R s ,R p ,n) channel codes such that 

limP[(M s ,M p )^(M„M p )]=0 

and 

lim -I(M s ;Z n \M„) =0. 

Note that because the eavesdropper may completely or partially decode M p , the secrecy 
requirement is modified accordingly to consider I(M S ; Z n \M p ) instead of I(M S ; Z n ). 

Theorem 2 (Theorem 3 in [6J). A rate pair (R s , R p ) is achievable under weak secrecy if 

R s < I(W;Y\V)-I(W;Z\V), (11) 

R P < I(V;Y) (12) 

for some V -O-W -D- X -O-Y Z . 

The proof can be found in [6J. Let us denote the above region as 1Z. We now strengthen 
the result by considering strong secrecy introduced in [HOl . Later we will use strong secrecy to 
connect the operationally separate source and channel encoders. 
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Definition 4. The rate pair (R s ,R p ) is achievable under strong secrecy if for all (M s ,M p ) 
satisfying ([TO]) , there exists a sequence of (R s ,R p ,n) channel codes such that 

limP[(M p ,M s )^(M s ,M p )] = 

n—too 

and 

lim I(M s ;Z n \M p ) = 

Theorem 3. A rate pair (R s , R p ) achievable under weak secrecy is also achievable under strong 
secrecy. 

For simplicity, we consider only the case in which \Z\h finite in the following. Generalization 
to Z — M. can be done by considering Z&, a quantized version of Z, as in [fTT||. The following 
two lemmas will assist the proof of Theorem [3] by providing a sufficient condition for satisfying 
the secrecy constraint liran^^ I(M S ; Z n \M P ) = 0. 

Lemma 1. If \\Pz™\M p =m p PM a \M p =m p - Pz«M a \M p =m p \\Tv < e < 2> then 

I(M S ; Z n \M p = m p ) < -6 log ,..', . 

\M s \\Z n \ 

This lemma was also discussed in |fT2j and its proof can be found in lfT3l . 
Lemma 2. If for every (m s ,m p ), there exists a measure 9 m on Z n such that 

\\Pz n \M p =m p ,M s =m, s ~ 9m p \\TV < e n 

then 

lim I(M s ;Z n \M p ) = 

where e n = 2~ n/3 for some (3 > 0. 

A proof of Lemma |2] is given in Appendix lAl 
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If there exist channel codes such that F[(M s ,M p ) ^ (M s , M p )\ — > n and measure 9 m for 
all m p such that ||Pz n |M =m ,Ms=m s — &m \\tv < e n , then Theorem |3] follows immediately. The 
existence of such a code and measure is assured by the same codebook construction and choice 
of measure as in [121. 



B. Source Coding 

Recall from our problem setup in Section [TT] that the sender Alice has an i.i.d. source sequence 
S k . A source encoder is needed to prepare S k by encoding it into a pair of messages (M s , M p ) 
that satisfies Pm 3 \m = m ( m «) — 2~ kR » = 2~ nRs so that it forms a legitmate input to the channel 
model in Section IIII-Al 

Definition 5. An (R' s , R' k) source code consists of an encoder f s and a decoder g s such that 

f s :S k ^M s x M p 
g s :M s xM p ^ S k 
where \M S \ = 2 kR '° and \M P \ = 2 kR k 

Definition 6. A rate distortion triple (R' s , R' D) is achievable under a given distortion measure 
d(s, t) if there exists a sequence of (R' s , R' p , k) source codes such that 

ton F[S k + g s (f s (S k ))] = 

and the message pair generated by the source encoder satisfies PM a \M p =m p ij n s) = 2~ kRs and 
for all Pz n \M s M p such that I(M S ; Z n \M p ) — > 

liminf min E[d k {S k , t k {Z n ))] > D. 

k^oo t k (z n ) 

Theorem 4. (R' S ,R' D) is achievable if 

R' s >0, 
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R s + R p > H(S), 

and 

D<A. 

The general idea for achievability is to consider the e-typical S k sequences and partition them 
into bins of equal size so that each bin contains sequences of the same type. The identity M p of 
the bin is revealed to all parties, but the identity M s of each sequence inside a bin is perfectly 
protected. Lj Each of such partitions is treated as a codebook. It was shown in that, for the 
noiseless case in which Eve is given m p instead of z n , the distortion averaged over all such 
codebooks achieves the maximum distortion A as k — > oo and therefore there must exists one 
partition that achieves A. In order to transition from their result to our claim in Theorem |4l we 
only need to show 

mmE[d k (S k ,t k (Z n ))] > min E[d k (S k , t k {M p ))}. 

t k (z n ) t k (m p ) 

Proof: First, observe that 

k 

minE[d fc (S*, **(•))] = -J2imnE[d(Si,t{i,-))] (13) 

t (•) K . HV) 

Next, we claim the channel output sequence z n does not provide Eve anything more than m p 
and therefore 

mmElly" d( Si, t(i,Z n ))] > min E[- ^ d(S h t(i, M p ))\ - 26' (e) (14) 

t(i,z n ) k *— ' t(i,m„) k ^-^ 

The analysis is similar to [6|, but for the sake of clarity, we present the complete proof of (TH1) 
in Appendix [Bj 

'Strictly speaking, the source encoder may violate the condition (|10|) on (k + l)' s ' number of bins, because (k + l)' 5 ' is an 
upper bound on the number of types of sequence with length k. However, this is just a very small (polynomial in k) number 
of bins compared with the total number (roughly 2 kH ^ ') of bins. Therefore, for this small portion of "bad" bins that violates 
POD , we can just let the source encoder declare an error on the private message M s and constructs the dummy M 3 uniformly 
given the bin index m p . This will only contribute some e factor to the error probability. 
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Finally, combining ( 1T4|) with (TT3|) give us the desired result. ■ 

C. Achievability of Theorem [7] 

With all the elements from Section IIII-AI and IIII-Bl we are now ready to harvest the achiev- 
ability proof of Theorem [T] using Theorems |2] and @] by concatenating the channel encoder to 
the source encoder. 

Proof: Fix v > e > 0. Fix P s . Let R s ' = 2u, R p = H{S) - v and R! = R s ' + R p ' . We 
apply the same codebook construction and encoding scheme as in Section IIII-Bl by pardoning 
the e-typical S k sequences into 2 kRp bins and inside each bin we have 2 kRs sequences so that 
F[S k 7^ g s (f s (S k ))) < e. Recall that all the sequences inside one bin are of the same type, so it 

is guaranteed that 

1 1 

PM s \M p =m p \jn S ) 



\M a \ 2 kR '° 
for all m p , m s , which implies I(M S ; M p ) = 0. 

Let R s and R p be the channel rates and R P (R S ) be the outer boundary of the region given 
in Theorem |2l Suppose max( i?svRp ) G7 j_R s > 0, i.e. there exists W-D-X—\3-YZ such that 
I(W; Y) — I(W; Z) > (justified in Appendix 0- R P (R S ) is continuous and non-increasing. 
Thus, R p achieves the maximum at R s = 0, which would be the channel capacity maxj I(X; Y) 
of Py\x for reliable transmission. By the continuity of R P (R S ), (R s , R p ) = (2Ru, R p (0) — 8{v)) 
is achievable under strong secrecy, i.e. F[(M s ,M p ) ^ (M s ,M p )} < e and I{M s ;Z n \M p ) < e, 
where 5{u) < B2Rv -» as v — > 0, and B = max fis R P (R S ) = R P (0). 

From the above good channel code under strong secrecy we have Pz"\m s m p such that I(M S ; Z n \M p ) — > 
0. Therefore, we can apply Theorem |4] to achieve 

liminf min E[d k {S k , t k {Z n ))] = D. 

fc^oo t k (z n ) 

The error probability is bounded by the sum of the error probabilities from the source coding 
and channel coding parts i.e. ¥[S k ^ S k ] < 2e. Finally, we verify the total transmission rate to 
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complete the proof: 



R 



> 



n = R' B + R' v 

Rp(0) + 2(B + \)Rv 
H(S) + u 

Rp{o) 



H(S)+u 
max x I(X;Y) 
H(S) + v ' 



We next state the rate-distortion result for source-channel coding with an i.i.d. source sequence 
and discrete memoryless broadcast channel Pyz\x when causal information is available to Eve. 
The result comes from the rate matching of fl6]. 

Theorem 5. For an i.i.d. source sequence S k and a memoryless broadcast channel Pyz\x, a 
rate distortion pair (R, D) is achievable if 

'I{V;Y) I(W;Y\V)-I{W;Z\Vy 



R < min 



/(S;tf)' H(S\U) 



RD < a ■ A + (1 - a) ■ min E[d(S, t(U))] 

t(u) 

for some distribution P s Pu\sPvPw\vPx\wPyz\x, where a = [I{V %% M+ ■ 



IV. MMF Main Results 

We now return to the MMF model introduced in Section U With the theoretical results obtained 
from the previous section, we have the tools needed to find the rate distortion regions for the 
MMF model defined in (J3J) and (jSJ) under the two scenarios. In this section, we assume the 
channels are constant. First of all, we will give the achievable rate region under strong secrecy 
(therefore also under weak secrecy). 
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Theorem 6. The following rate region for one private and one non-private message is achievable 
under strong secrecy for a complex Gaussian channel: 

\HKW + a 2 N I\ \H*KH^ + a 2 N J\ n ,, 

R s < log j — 2— in log r^~Ti (15) 

\HQW + alI\ 
** ~ X ° g \HKW + alI\ (16) 

for some K and Q, where -< K -< Q, K G H MxM , Q satisfies the power constraint in (J5J), 
and H and H e are the channel gain matrices. 

Proof: According to Theorem |2] and |3] 

R s < I(W;Y\V)-I(W;Z\V) (17) 

R P < I(V;Y) (18) 

for some V -H-W '-D-X -D-Y Z and E[XX f ] < Q, is an achievable rate pair. 

We restrict the channel input X to be a circularly symmetric complex Gaussian vectors. Let 

V ~ CAf(0, Q - K, 0), B ~ CAf(0, K, 0) such that B and V are independent, and W = X = 

V + B. Therefore, X ~ CJ\f(0, Q, 0) satisfies the power constraint. Similar to [3], the rate pair 
(R s ,Rp) satisfying inequalities ( 1T5l) and ( TT6j) can be achieved. ■ 

An immediate corollary follows directly from the above theorem. 

Corollary 1. The following rate pairs are achievable under strong secrecy for MMF with channel 
gains defined in (j4]) and ([6]) and equal full power allocation Q = I: 

R , < i os ^yi (19) 

Rr < log K^±M (20) 

p ~ & \SNRK + I\ v 

for some K where ■< K ■< I, K € n MxM , SNR = E L/a 2 N and SNR e = E L e /a 2 Ne . 

With the secrecy capacity region of MMF, we can evaluate its rate distortion region (R, D) 
under the two extreme cases, without and with causal information at Eve's decoder respectively. 
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For the best case scenario (no causal information), we will give a sufficient condition to force 
maximum distortion A between Alice and Eve. For the worst case scenario (with causal in- 
formation), we will give an achievable rate-distortion region and look at the particular case of 
Hamming distortion, defined as: 

{0, 8=t, 
1, otherwise. 

Theorem 7. For an i.i.d source sequence S k , if 

i SNR 
mm Qa < (21) 

je{i,...,M} ° SNR e 

where 4>j 's are the diagonal entries of $, then the following rate distortion pair (R, D) is 

achievable with no causal information at the eavesdropper: 

M\og(SNR + l) 
R < H(S) (22) 

D < A. (23) 

Theorem [7] follows from Theorem [T] and Corollary [Q Note that (|2TI) is a sufficient condition 
for the existence of a secure channel with strictly positive rate from Alice to Bob. An discussion 
on this condition is provided in Appendix iDl 

Theorem 8. For an i.i.d. source sequence S k and Hamming distortion, the following distortion 
rate curve D(R) is in the achievable region with causal information at the eavesdropper: 

D = d(H(S)), ifR<jjr^ (24) 

D = a(^A + (l-a(K)Mffl) i; /i<fi<i (25) 

where d(R' s ) = min(/ (R' s ) , 1 — max s Ps(s)) and f(R' s ) is the linear interpolation of the points 
(logn,^i), n = 1,2,3,...; K, = {K e U MxM ,0< K < I}, 

\SNRK' + 1\ 

R„ = max log = r -= , 

K'eK \SNR e V$^ e K'^V$ + I\ 
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R S (K)= log 



R* p = M\og{SNR+l), 
\SNRK + I\ 



a{K) 
0(K) = log 
j(K) = lo. 



SNR e V$ty e K^V$ + I\ 
J3{K) - j(K) 



\{SNR+l)I\ 
\SNRK + 1\ 

\SNR e <$> + 71 



The result given in Theorem [8] can be derived directly from Theorem [5] and Corollary Q] 

V. Numerical Results 

In this section, we present numerical results illustrating achievable rate distortion regions of an 
MMF under the two information models. Let us consider measuring the eavesdropper's distortion 
using Hamming distortion and a Bern(p) i.i.d. source sequence. Fig. 3 shows numerical results 
corresponding to Theorem |7J and Theorem |8] under equal power allocation. The channels are 
simulated as a 4-mode MMF with SNR = 20dB, SNR e = lOdB, and MDL = 20dB. 

In each plot, the vertical line on the right is the maximum reliable transmission rate between 
Alice and Bob and the vertical line on the left is the maximum perfect secrecy transmission rate 
that can be obtained with separate source-channel coding. The horizontal line is the maximum 
distortion which is also the rate distortion curve from Theorem [7J with no causal information 
at Eve. The curve obtained from Theorem |8] shows the tradeoff between the transmission rate 
between Alice and Bob and the distortion forced to Eve with causal information. We see in 
Fig. Ha), p = 0.3, that with our source-channel coding analysis, we gain a free region (from 
the left vertical line to the kink) for maximum distortion as if under perfect secrecy because 
we here made better use of the redundancy of the source. In Fig. (3jb) with p = 0.5, since 
there is no redundancy in the source, the distortion curve drops immediately after the maximum 
perfect secrecy rate. Note that the transmission rates are not considered beyond the right vertical 
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lines because they are above the maximum reliable transmission rates and Bob cannot losslesly 
reconstruct the source sequences. 
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Fig. 3: Achievable distortion-rate curves. On the left is the Bern(0.3) i.i.d. source case and on the right is the 
Bern(0.5) i.i.d. source case. On the x-axes are the symbol/channel use source-channel coding rate and on the y-axes 
are the average Hamming distortions. 



VI. Random Channel 

So far, we have only considered the rate distortion tradeoff under deterministic channels H 
and H e , i.e. the transmitter and receivers know the channel matrix before they design the codes 
and the channels stay constant. In the previous sections, we showed the existence of source- 
channel codes that guarantee a designed level of distortion inflicted on an eavesdropper under 
two different information assumptions. However, in MMF, the channels H and H e vary with 
time and the CSI is not available at the transmitter even though it has a long coherence time. 
Recall from Section HH the randomness of H = ^E L^f and H e = V-^o-^v^M/ 6 comes from 
the unitary component \l/, \l/ e and the diagonal component $. The distribution of \I/, \l/ e , and 
$ are assumed to be independent and they are i.i.d. processes for each coherence time. The 
random matrices \& and \l/ e are uniformly distributed in 0, where is the set of all M x M 
unitary matrices [1]. The diagonal matrix $ = diag{^>x, ..., 4>m}, where 0, = M A f' . Here 
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0i = 4>min and 2 = 4> m ax are fixed constants throughout the entire communication for some 
positive (pmin and 4> max , and <& ~ Unif[(f) m in, 4>max] for i = 3, ..., M. 

Since the channels have long coherence times, the average performance is typically measured 
by outage probability. We define the outage probability of rate C out under power allocation 
strategy Q to be 

Pout(Q,C out ) = P$^*[-R s ((3) < C out ], (26) 

where R S (Q) = I(X; Y) - I(X; Z), Q = E[XX*]. R S (Q) is the "secrecy capacity" (maximum 
rate for perfect secrecy) under power allocation Q of the MMF system. Note that R S (Q) is a 
random variable because the channels Pyz\x are now random. The capacity C = maxg log |/ + 
HQH^\ and secrecy capacity C s = max^flog \I+HQH^\— log | I+H e QH e ^\] for a deterministic 
MIMO Gaussian broadcast channel were given in Ifl4l and [fT5l , respectively. 

For random channels, typically, an outage occurs (i.e. R S (Q) < C out ), if either reliable 
transmission to the legitimate receiver fails or perfect secrecy is violated. However, because 
of the unitary property of the MMF channel, the maximum reliable transmission rate under 
power allocation strategy Q is constant at log | J + SNR • Q\ which does not depend on the 
distribution of \P. Therefore, there is only one interpretation for outage, i.e. the perfect secrecy 
condition is violated. Under the MMF model, we have the corresponding 

R S (Q) = log \I + SNR • Q\ - log \I + SNR e • # e Q¥ et $|. 

Hence, f l26|) can be written as 

Pout(Q,C out ) = P **'0°g| / + SNR e.^ e g^ e t$| < C ° Ut) - 

We must now determine which power allocation strategy Q gives the smallest outage probability 
for a given C out . It has been shown quantitatively in lfl6l that equal full power allocation Q = I 
minimizes the outage probability given in fl26l) . This explains why we focus on the case Q = I 
in earlier sections. 
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VII. Conclusion 

In this work, we have examined the rate-distortion-based secrecy performance of an insecure 
MMF communication system. The sender is assumed to have an i.i.d. source sequence which 
the intended receiver and the eavesdropper both try to reconstruct. Two source-channel coding 
models with different information availability at the eavesdropper have been considered. We 
have shown that, when no causal source information is disclosed to the eavesdropper, under a 
general broadcast channel and any distortion measure, it is possible to send the source at the 
maximum rate that guarantees lossless reconstruction at the intended receiver while keeping the 
distortion at the eavesdropper as high as if it only has the source prior distribution. When the 
past source realization is causally disclosed to the eavesdropper, we have applied the theoretical 
results in H to the particular case of MMF channel. Numerical results for i.i.d. Bernoulli source 
and Hamming distortion have been provided. 

It was further argued that equal full power allocation minimized outage probability under the 
random channel setup. However, this power allocation strategy is only supported by quantitative 
results from [TT6l . The optimality of this strategy remains an open problem. Moreover, in our 
model, it is required that the intended receiver reconstruct the source losslessly. In a more general 
setting, one can allow lossy reconstruction of the source at the intended receiver, which is an 
interesting problem for further research. 
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Appendix A 
Proof of Lemma [2] 



Given (m s ,m p ), suppose there exists 6 mp such that 



\Pz n \M p =m p ,Ms=m a ~ ^rn p \\TV < e n 



(27) 



where e n = 2 n/3 for some f3 > Then we have the following: 



\Pz n \M p =m p ~ Qm, p \\TV 



5> 



Z n \Mp=m p (z n ) 



[z n )-O mp (z r - 



(28) 






/ , PM s \M p =m p ('m s )Pzn\M p =m, p ,Ms=m s (z n ) ~ / j Pu s \M v =m v (m s )6 mp (z* 



7 , 777^7-^ |Af p =rrv 



M.=m.A£ ) — 



TO _ ' ' 



< 2^ 2_^ ~\M~\ \ Pzn \ M P= m v,M s =rn s {z n ) - mp (z n )\ 
z n m s ' ' 

— 2.^ rjn I 2^ |-Pz«|Af p =m p ,M s =m 3 (^ n ) - G nip (z n )\ 



< 



^|X/ n 



(29) 



(30) 
(31) 



where (12U1) follows from triangle inequality and (15UJ) follows from fl27|) . 
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\\Pz n \Mp=m p PMs\Mp=m p ~ Pz n M s \M p =m p \ \TV 

— 2-^ 2_^ \Pz n \M p =m p {z n )PM s \M p =m p {m s ) - Pz"\M p =m p ,M s =m s {z n )PM s \M p =m p {m s )\ 

z n m s 

= I A/f I ^ ^ r zn \ M P= m P ( Z > ~ Pz n \M p =m p ,M s =m s \Z n ) | 

- jTTT 2^ 2^ \Pz"\M p =m p {z n ) - 6m p (z n ) + 9 mp (z n ) - Pz™\M p =m p ,Ms=m s (^") | 

- 1T77 Z^ 2^(|- P Z n |M p =m p (^") - ^m p (^ n )| + \Pz n \M p =m p ,Ms=m a {z n ) ~ Om p {z n )\) 
' ' z n m a 

— TT77 Z^E \Pz™\M p =m p (z n ) - Om p (z n )\ + 2_^ \Pz"\M p =m p ,Ms=m s (z n ) ~ O mp (z r ' 

m s z n z n 

Ttl s 

= 2e„ 
By applying Lemma [Q we have 

I(M s ;Z n \M p ) = ^P Mp (m p )J(M s ;Z"|M p = m p ) 

m p 

2e r 



- 5Z Pm p ( m p) (- 2e « lo S 



\M s \\Z\ n/ 

m p i ii i 

< 2-2- n P(nR s + n\og\Z\) (32) 
where fl32l) goes to as n — > oo. 

Appendix B 
Proof of (JUJ) 

For each i, we have 

J(^;Z n |M p ) < I(M s Si-,Z n \M p ) 

= /(M s ;Z"|M p ) + /(^;Z"|M s M p ) 

< e (33) 
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for large enough n. (|33|) follows from strong secrecy of the channel and Fano's inequality. We 
now define 

P = PSiZ n M p 
Pi = PM p PSi\MpPz n \Mp 

i.e. Pi is the Markov chain S{— □— M P — □— Z n . By Pinsker's inequality, 

||P-P||rv < -^D(Pi||Pi)3 

* Ji (34) 

min E[d(S h t(i,Z n ))] > min E[d(S h t(i, Z n , M p ))\ 

t(i,z n ) t(i,z n ,m p ) 

> min Ep i [d(S i ,t(i,Z n ,M p ))]-5'(e) (35) 

t(i,z n ,m p ) 

= min Ep.[d(Si,t(i,M p ))]-5'(e) (36) 

t(i,m p ) 

> mmE[d(Si,t(i,M p ))]-28\e) (37) 

t(i,m p ) 

where fl35|) and fl37|) use the fact that P and p are close in total variation from fl34|) : fl36l) uses 
the Markov relation S^— □— M p — □— Z n of distribution p. The technical details can be found in 



Lemma 2 and 3 from Q6J . Averaging over k, we obtain (TT4l) . 

Appendix C 
Justification of the condition max( i?S! _ Rp ) 67J P s > 

From Theorem |2] or |3] we have 

max R s > 

(i? s ,R p )e^ 

is equivalent to 

J(W;Y|V)-/(W;Z|V) > (38) 
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for some V— □— W— □— X— □— Y Z. We claim this can be simplified as 

I(W;Y)-I(W;Z) > (39) 

for some W-D-X-B-YZ. 

To see (1591) =>■ (1381) . we can just let V = 0. To see (1381) =>■ (1391) . observe that if there exists 
V—\3-W-€2—X-€2-YZ such that fl38l) holds, then there has to exist at least one value v 
such that I(W; Y\V = v) - I(W; Z\V = v) > 0. We can redefine the distribution as Pwxyz — 
Pwxyz\v=v h can be verified that the Markovity W-D—X-O-YZ holds and Pyz\x — Pyz\x- 

Appendix D 

Sufficient condition on Theorem [7] 

From Theorem [TJ and Corollary [Q we know that a sufficient condition for the eavesdropper's 
channel not being less noisy than the intended receiver's channel is 

|SNRA^ + /| 

max ^ > 1. (40) 

i<en MxM ,o±K±i |SNR e \I/ e i ; 0]/ et $ + I\ 

However, (HOI is computationally heavy to verify. If we restrict K to be of the form K = \I/ eT A\I/ e 
where A is diagonal with diagonal entries Aj G [0, 1], then (jlOj) has a much simpler form: 

n"i(l + SNR'A,^) 
Therefore, if there exists a j E {!,..., M} such that 4>j < -^^k, we can choose Aj = 1 and 



Xi = for i ^ j to satisfy (I41j) . 
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